Skip to content
OpenAdvisories

Package · Go

github.com/cloudflare/circl

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-1732

    Improper random reading in CIRCL

    When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error. In rare deployment cases (error thrown by the Read() function), this could lead to a predictable shared secret. …

    Cloudflare CIRCL github.com/cloudflare/circl Go